safe.ca

Observed Aug 11, 2026, 05:56 UTC (3d ago). Every field below was attested with an Ed25519 signature at scan time.

This reading of safe.ca was taken 3d ago

safe.ca is on the survey sweep, which works its way across the whole catalog rather than returning to one name on a schedule. Putting safe.ca under watch moves it to the fast lane, where DomainDrift re-checks it about every 5 minutes and signs each reading, so a change becomes a dated event within minutes instead of waiting for the sweep to come round.

Watch safe.ca Watching a domain needs a DRM3 account. The reading above stays free and public either way.
Up right now
Secured byLet's Encrypt
Also usesGoogle Search Console
4 subdomains · tranco
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat safe.ca actually stands on - every host below is a signed observation
safe.ca
A / AAAA
192.219.254.203
unattributedserves the site
NS
dns1.safe.cadns2.safe.cadns3.safe.cadns4.safe.ca
safe.caanswers its DNS
MX
mailprod0.safe.ca
safe.careceives its email
TLS
mailprod0.safe.ca
Let's Encryptissued its certificate

DNS Records

A 1

  • 192.219.254.203

MX 1

  • 10mailprod0.safe.ca

TXT 2

  • v=spf1 mx ip4:192.219.254.0/24 -all
  • google-site-verification=KP44UgsNzdA5d8xNbYcnEe-8KevEj_Yi0sTzIzfUkvo

NS 4

  • dns1.safe.ca
  • dns2.safe.ca
  • dns3.safe.ca
  • dns4.safe.ca

SOA 1

  • dns2.safe.ca postmaster.safe.ca

SRV 3

  • asterisk2.safe.ca:5060 p10
  • asterisk1.safe.ca:5060 p10
  • safemail3.safe.ca:993 p0

CAA 1

  • issue "letsencrypt.org"

DMARC_RECORDS 1

  • v=DMARC1; p=reject; pct=100; aspf=s; rua=mailto:email-trouble@safe.ca;

TLS Certificates (4)

Common NameIssuerExpires
mailprod0.safe.ca C=US, O=Let's Encrypt, CN=YE2 Sun, 20 Sep 2026 04:24:51 +0000
YE2 C=US, O=ISRG, CN=Root YE Sat, 02 Sep 2028 23:59:59 +0000
Root YE C=US, O=Internet Security Research Group, CN=ISRG Root X2 Thu, 02 Sep 2032 23:59:59 +0000
ISRG Root X2 C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (4)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; the only network request the check makes is for the published public keys.

Verify this receipt

Ed25519 Receipt

Receipt ID
rcpt_1d202ea6835a7f10
Output Hash
4afc305c85fd6ca4312b5eb3045fd87851570db0b7d421ee4f837ecb558e72f2
Signature
ed25519:f1bebb9ac817d23f61129f6830bab846c1a4fe4197cb24b93ba76d2cc76e9647cd85cce04c71f8dc30e15a4c12d5c956254433548a9ebf77fbc29c5d06b52206
Public Key
ed25519:4859bb613d650e12dd7478cc307c73a8712fabc115a9dc59f65534ed3c09a8f9
Parent
(genesis)
Plane
fast
Verify this in your browser
CONTINUOUS INTERNET TELEMETRY24H DRIFT46,461 material changesacross 44,568 domains · 24h to ~60m ago · +2,379 vs yesterdayROTATION65 domains moved DNS from koaladns.com to magpiedns.com, 63 moved backa rotation loop, not a migration · 24hNOW489 curated domains not reachablelast probe, steadySITE ERRORS36,521 sites serving errorslast probe · 5xx / 404 / TLSBOT DEFENSEbot defense observed on 116,169 sites429 rate-limit / 403 bot-block, a posture signal